Hey all.

Left for the day so i'll try and post debug output tomorrow. However i think i 
might have stumbled upon the issue.

if i do a klist -kte as root, none of the RHEL6.2 machines have a des-cbc-crc 
key in the list, but the RHEL5.7 does.
The NFS service wich can only use des-cbc-crc can't speak with the KDC since 
that host does not have any keys that supports that encryption.
So i guess i need to enable allow_weak_crypto in the krb5.conf and then update 
my principal on the hosts with ipa-getkeytab -s <server> -p 
host/hostname.domain@DOMAIN



/J

_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to